Bug bounty program
EV
Equifax-vdp
Most upvoted reports7
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Important information leaked on GithubAnalysed#649322 | Authentication | 2019-08-22 | – | 98 |
| reflected XSS in [www.equifax.com]Analysed#1818163 | Cross-site Scripting | 2023-04-23 | – | 47 |
| Subdomain takeover at http://test.www.midigator.comAnalysed#1718371 | Access Control | 2022-11-12 | – | 32 |
| Open SonarQube instance leaking internal source code#947946 | Information Disclosure | 2020-09-03 | – | 20 |
| reflected XSS in [www.equifax.com]#1818172 | Cross-site Scripting | 2023-04-23 | – | 19 |
| Information Leak (Github)#694931 | No weakness recorded | 2020-04-09 | – | 17 |
| RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638 | Cross-site Scripting | 2022-03-09 | – | 6 |
Subdomains55,670
| Name | Scope | First seen |
|---|---|---|
| covid1920.github.com | Not in the scope | 2026-11-14 |
| covid192009.github.com | Not in the scope | 2026-11-14 |
| covid192010.github.com | Not in the scope | 2026-11-14 |
| covid192011.github.com | Not in the scope | 2026-11-14 |
| covid192012.github.com | Not in the scope | 2026-11-14 |
| covid192014.github.com | Not in the scope | 2026-11-14 |
| covid192017.github.com | Not in the scope | 2026-11-14 |
| covid196.github.com | Not in the scope | 2026-11-14 |
| covid197.github.com | Not in the scope | 2026-11-14 |
| covid19acc.github.com | Not in the scope | 2026-11-14 |
| covid19admin.github.comadmin | Not in the scope | 2026-11-14 |
| covid19akamai.github.com | Not in the scope | 2026-11-14 |
| covid19api.github.comapi | Not in the scope | 2026-11-14 |
| covid19api-docs.github.comapi | Not in the scope | 2026-11-14 |
| covid19api1.github.comapi | Not in the scope | 2026-11-14 |
| covid19april.github.com | Not in the scope | 2026-11-14 |
| covid19b.github.com | Not in the scope | 2026-11-14 |
| covid19beta.github.comstaging | Not in the scope | 2026-11-14 |
| covid19billing.github.com | Not in the scope | 2026-11-14 |
| covid19boards.github.com | Not in the scope | 2026-11-14 |
| covid19br.github.com | Not in the scope | 2026-11-14 |
| covid19brand.github.com | Not in the scope | 2026-11-14 |
| covid19bucket.github.comdata | Not in the scope | 2026-11-14 |
| covid19c.github.com | Not in the scope | 2026-11-14 |
| covid19cases.github.com | Not in the scope | 2026-11-14 |
| covid19ci.github.com | Not in the scope | 2026-11-14 |
| covid19client.github.com | Not in the scope | 2026-11-14 |
| covid19cms.github.comadmin | Not in the scope | 2026-11-14 |
| covid19com.github.com | Not in the scope | 2026-11-14 |
| covid19confluence.github.comtools | Not in the scope | 2026-11-14 |
| covid19control.github.com | Not in the scope | 2026-11-14 |
| covid19data.github.com | Not in the scope | 2026-11-14 |
| covid19docker.github.comtools | Not in the scope | 2026-11-14 |
| covid19docs.github.com | Not in the scope | 2026-11-14 |
| covid19drop.github.com | Not in the scope | 2026-11-14 |
| covid19edge.github.com | Not in the scope | 2026-11-14 |
| covid19eu.github.com | Not in the scope | 2026-11-14 |
| covid19euwe.github.com | Not in the scope | 2026-11-14 |
| covid19evelynn.github.com | Not in the scope | 2026-11-14 |
| covid19events.github.com | Not in the scope | 2026-11-14 |
| covid19feb.github.com | Not in the scope | 2026-11-14 |
| covid19forms.github.com | Not in the scope | 2026-11-14 |
| covid19github.github.comgit | Not in the scope | 2026-11-14 |
| covid19hw.github.com | Not in the scope | 2026-11-14 |
| covid19hwcdn.github.com | Not in the scope | 2026-11-14 |
| covid19jenkins.github.comci | Not in the scope | 2026-11-14 |
| covid19jinx.github.com | Not in the scope | 2026-11-14 |
| covid19june.github.com | Not in the scope | 2026-11-14 |
| covid19korea.github.com | Not in the scope | 2026-11-14 |
| covid19lan.github.com | Not in the scope | 2026-11-14 |
| covid19latinamerica.github.com | Not in the scope | 2026-11-14 |
| covid19mail.github.commail | Not in the scope | 2026-11-14 |
| covid19na.github.com | Not in the scope | 2026-11-14 |
| covid19net.github.com | Not in the scope | 2026-11-14 |
| covid19northamerica.github.com | Not in the scope | 2026-11-14 |
| covid19pantheon.github.com | Not in the scope | 2026-11-14 |
| covid19pass.github.com | Not in the scope | 2026-11-14 |
| covid19payment.github.com | Not in the scope | 2026-11-14 |
| covid19pc.github.com | Not in the scope | 2026-11-14 |
| covid19php.github.com | Not in the scope | 2026-11-14 |
| covid19preferences.github.com | Not in the scope | 2026-11-14 |
| covid19priv.github.com | Not in the scope | 2026-11-14 |
| covid19private.github.cominternal | Not in the scope | 2026-11-14 |
| covid19prod.github.com | Not in the scope | 2026-11-14 |
| covid19production.github.com | Not in the scope | 2026-11-14 |
| covid19profile.github.com | Not in the scope | 2026-11-14 |
| covid19profiles.github.com | Not in the scope | 2026-11-14 |
| covid19promo.github.com | Not in the scope | 2026-11-14 |
| covid19promotion.github.com | Not in the scope | 2026-11-14 |
| covid19proxy.github.com | Not in the scope | 2026-11-14 |
| covid19repo.github.comgit | Not in the scope | 2026-11-14 |
| covid19reset.github.com | Not in the scope | 2026-11-14 |
| covid19restricted.github.com | Not in the scope | 2026-11-14 |
| covid19reviews.github.com | Not in the scope | 2026-11-14 |
| covid19s.github.com | Not in the scope | 2026-11-14 |
| covid19secure.github.com | Not in the scope | 2026-11-14 |
| covid19security.github.com | Not in the scope | 2026-11-14 |
| covid19singed.github.com | Not in the scope | 2026-11-14 |
| covid19skins.github.com | Not in the scope | 2026-11-14 |
| covid19spring.github.com | Not in the scope | 2026-11-14 |
| covid19stage.github.comstaging | Not in the scope | 2026-11-14 |
| covid19stage1.github.comstaging | Not in the scope | 2026-11-14 |
| covid19staging.github.comstaging | Not in the scope | 2026-11-14 |
| covid19static.github.com | Not in the scope | 2026-11-14 |
| covid19swagger.github.comapi | Not in the scope | 2026-11-14 |
| covid19test1.github.comtest | Not in the scope | 2026-11-14 |
| covid19testing1.github.comtest | Not in the scope | 2026-11-14 |
| covid19trial.github.com | Not in the scope | 2026-11-14 |
| covid19tur.github.com | Not in the scope | 2026-11-14 |
| covid19turk.github.com | Not in the scope | 2026-11-14 |
| covid19w3.github.com | Not in the scope | 2026-11-14 |
| covid19web.github.com | Not in the scope | 2026-11-14 |
| covid19web1.github.com | Not in the scope | 2026-11-14 |
| cow.github.com | Not in the scope | 2026-11-14 |
| cowboy.github.com | Not in the scope | 2026-11-14 |
| cowoxosantivirus.github.com | Not in the scope | 2026-11-14 |
| cowpaths.github.com | Not in the scope | 2026-11-14 |
| cowthan.github.com | Not in the scope | 2026-11-14 |
| cox.github.com | Not in the scope | 2026-11-14 |
| coxchen.github.com | Not in the scope | 2026-11-14 |
0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.